1 in 99 emails is a phishing scam. And a quarter of these slips through security filters to reach your inbox.

What’s phishing? It’s where someone sends you a fake email pretending to be someone else. They’re hoping you’ll click a bad link or download a dangerous attachment.

They want to infect your network with malware or steal your login details.

Phishing really is bad news for your business. So here are some red flags to watch out for. First, look for bad grammar or spelling mistakes throughout the email.

Or an unusual layout when compared to genuine emails you’ve received before. Maybe the email is from a supplier you use often, but the email says “dear customer” rather than greeting you by name.

It’s a good idea to check the sender’s email address too. Is it genuine, or a close copy? You can check any website link by hovering your mouse over it. Is it directing you to a genuine website or one with a similar but fraudulent URL?

And if there’s an attachment, what’s the filename? A phishing email may use strange names.

If you’re still not sure after completing these checks, don’t click anything. Visit the website that the email’s trying to send you to, and login directly there. Or phone the sender.

These are just the basics. If you want proper security training for your team – and don’t worry, it’s fun so they engage with it and remember it – get in touch.